Commit Graph

16 Commits

Author SHA1 Message Date
8176940d18 Centralize admin auth with endpoint filter 2026-02-05 17:11:17 +01:00
6b5f8a66c9 Remove admin key support; admin must be authenticated 2026-02-05 17:07:37 +01:00
52960a78bc Stop phase polling writes unless state changes 2026-02-05 17:04:52 +01:00
8e50b31a5b Harden screenshot validation against SSRF and add user-facing errors 2026-02-05 16:58:15 +01:00
1d28ea6568 Escape rendered suggestion content and validate URLs 2026-02-05 16:51:05 +01:00
a6265e8656 Switch to signed cookie auth and stop leaking player IDs 2026-02-05 16:28:22 +01:00
5d432c9d17 Add linked suggestions with synced voting 2026-02-05 09:07:46 +01:00
13c8bb6194 Add votes-final flag, warn on missing votes, and sync phases with results toggle 2026-02-04 22:54:36 +01:00
f1245c200f Auto-upgrade legacy Reveal phase players to Vote 2026-02-04 22:09:21 +01:00
e5e27af0af Add per-user phase navigation with results toggle 2026-02-04 21:43:12 +01:00
af84fc50d4 Add player count fields with validation and labeled UX 2026-01-29 01:53:24 +01:00
f713756ece Add remote image validation for screenshot URLs 2026-01-29 01:43:02 +01:00
5b62640b76 Validate screenshot URLs server- and client-side 2026-01-29 01:39:23 +01:00
60191a1fe3 Add admin accounts and streamlined header UI 2026-01-29 01:14:53 +01:00
f1534b7631 Add username/password auth and login UI 2026-01-29 01:01:13 +01:00
983488d258 Split API into phase-specific endpoint files 2026-01-28 17:11:25 +01:00